Patching Specialist

Xtium

3d•$60,000 - $65,000•Remote

About The Position

At XTIUM, we don’t just build IT solutions—we build careers. Our culture is designed to empower individuals to achieve their best while making a real impact. You’ll have the opportunity to connect with our leadership team, embrace challenges, and celebrate success in a dynamic, fast-paced environment. If you’re passionate, driven, and eager to grow, XTIUM is where your potential meets opportunity. Our team members are the driving force behind our success, and we’re looking for passionate, resilient individuals eager to grow and make a meaningful impact. If you’re ready to contribute and help shape the future, XTIUM is the place for you. About the Role: We are seeking a U.S.-based Endpoint Patching Specialist with hands-on experience in Ivanti Endpoint Manager (LANDesk) patching operations. This role is responsible for executing and improving patch compliance across Windows endpoints and servers, supporting patch reporting and remediation workflows, and partnering with operations teams to align patching with change windows and client requirements. Familiarity with Microsoft Intune and Active Directory for provisioning/deployment activities is required at a basic-to-intermediate level. Experience with additional RMM patching platforms and Linux patching is a strong plus.

Requirements

Hands-on Ivanti Endpoint Manager (LANDesk) patching experience in an enterprise or managed services environment (patch scan/remediate, scheduling, reporting, troubleshooting).
Working knowledge of Windows patching concepts (monthly cycles, reboots, maintenance windows, supersedence, vulnerability-driven remediation).
Basic-to-intermediate Active Directory experience focused on provisioning/deployment support.
Basic-to-intermediate Intune experience (enrollment/app deployment/config/compliance fundamentals).
Strong operational discipline: documentation, communication, and executing changes in controlled windows.
This position may require access to ITAR-controlled technical data. Employment and continued assignment in this role are contingent upon the candidate being eligible to access such data, which generally requires verification of “U.S. person” status as defined by ITAR (22 C.F.R. § 120.15). We comply with applicable export-control and anti-discrimination laws in our recruitment and hiring practices.
Patch operations execution excellence (precision, repeatability, low error rates)
Troubleshooting and root-cause analysis
Clear written and verbal communications (stakeholders, tickets, change records)
Customer/service mindset (managed services cadence, SLA awareness)
Security mindset (vuln priority, least privilege, audit readiness)

Nice To Haves

Experience with other RMM patching platforms (e.g., NinjaOne, Automate, Kaseya, N-able, Tanium, BigFix, SCCM/MECM, etc.).
Linux patching experience (package managers, repo configuration, kernel/agent updates, reboot coordination).
Experience integrating patch workflows with ITSM (incident/change), compliance reporting, or vulnerability management programs.
Familiarity with patch strategy concepts (rings, pilot groups, phased rollouts, exception handling).

Responsibilities

Ivanti / LANDesk Patch Management Administer and operate Ivanti Endpoint Manager (LANDesk) patching workflows, including scan/remediation, maintenance windows, and deployment scheduling.
Manage patch content lifecycle: review bulletins, validate applicability, stage content, and execute deployments with appropriate approvals and rollback considerations.
Troubleshoot patch deployment failures (agent health, detection logic, content distribution, prerequisite chains, reboot handling, etc.).
Produce patch/compliance reporting for stakeholders (compliance status, exceptions, drift, overdue items, and remediation plans).
Maintain documentation/knowledge articles for repeatable patch operations and known issues.
RMM Deployment Leverage Microsoft Intune and Active Directory to deploy, manage, and support RMM agents and related endpoint tooling across Windows environments.
Execute RMM deployments via Intune (app packaging, assignment, deployment validation, basic troubleshooting).
Support RMM deployment workflows tied to Active Directory, including device/user targeting, group-based assignments, and OU/GPO awareness.
Troubleshoot common RMM deployment issues (agent install failures, policy conflicts, device enrollment state, basic permissions issues).
Maintain intermediate knowledge of Intune and AD sufficient to reliably deploy and support endpoint management tooling
Process, Governance, and Collaboration Participate in change management practices to plan/execute patch events with minimal service disruption (scheduling, stakeholder notifications, validation steps, post-change reporting).
Coordinate with security/vulnerability teams on prioritized remediation, exceptions, and risk-based patching.
Support continuous improvement: standardize patch rings, reduce deployment failure rates, improve reporting accuracy, and streamline operational runbooks.